🟡 Medium ⏱ 10–30 min Last verified: 25 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2103 CVE-2012-2104 CVE-2012-2147 CVE-2012-3512 CVE-2012-3513 CVE-2012-4678 CVE-2013-6048 CVE-2013-6359 +1 more Upstream summary: The qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a symlink […]
Introduction This guide explains how to Set Up Consul Service Mesh on Debian 12 on Debian 12 Bookworm. Debian Bookworm uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 12 install with […]
🟡 Medium ⏱ 10–30 min Last verified: 24 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-4505 CVE-2012-5580 CVE-2020-25219 CVE-2020-26154 Upstream summary: Heap-based buffer overflow in the px_pac_reload function in lib/pac.c in libproxy 0.2.x and 0.3.x allows remote servers to have an unspecified impact […]
🟢 Low ⏱ 5–15 min Last verified: 24 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-4540 Upstream summary: Improper Handling of Exceptional Conditions vulnerability in Daurnimator lua-http library allows Excessive Allocation and a denial of service (DoS) attack to be executed by sending […]
🟢 Low ⏱ 5–15 min Last verified: 24 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2120 Upstream summary: The %{password(…)} macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent attackers to bypass […]
🟡 Medium ⏱ 10–30 min Last verified: 24 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-1000421 CVE-2017-18120 CVE-2020-19752 CVE-2023-36193 CVE-2023-44821 CVE-2023-46009 Upstream summary: Gifsicle gifview 1.89 and older is vulnerable to a use-after-free in the read_gif function resulting potential code execution Table of […]
🟡 Medium ⏱ 10–30 min Last verified: 24 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-24821 CVE-2020-24822 CVE-2020-24823 CVE-2020-24824 CVE-2020-24825 CVE-2020-24826 CVE-2020-24827 CVE-2023-24180 Upstream summary: A vulnerability in the dwarf::cursor::skip_form function of Libelfin v0.3 allows attackers to cause a denial of service (DOS) […]
🟢 Low ⏱ 5–15 min Last verified: 24 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-13179 Upstream summary: Calamares versions 3.1 through 3.2.10 copies a LUKS encryption keyfile from /crypto_keyfile.bin (mode 0600 owned by root) to /boot within a globally readable initramfs image […]
🟢 Low ⏱ 5–15 min Last verified: 24 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-11353 Upstream summary: yadm (yet another dotfile manager) 1.10.0 has a race condition (related to the behavior of git commands in setting permissions for new files and directories), […]
Introduction Deploying configure saltstack on debian 12 on a Debian 12 Bookworm machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites Ensure Debian 12 Bookworm […]
